A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen ...

Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.

The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo Alto Networks ...